$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/04cfa462-48df-433d-86f1-73994c9b8fab.roa File: 04cfa462-48df-433d-86f1-73994c9b8fab.roa (raw, json) Hash identifier: ouGUZxjyw0qazB2S9JfYSm1UcGdvHghNS1kd/xObBmU= Subject key identifier: DC:E1:54:97:A8:3C:F1:56:5C:DC:6F:A2:6E:DD:33:C7:CE:EE:B3:4C Certificate issuer: /CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Certificate serial: 08AAB3508D92D74E0DE26D3EC8CE2C3EBF13B7F4 Authority key identifier: 25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/04cfa462-48df-433d-86f1-73994c9b8fab.roa Signing time: Fri 15 Sep 2023 00:00:00 +0000 ROA not before: Fri 15 Sep 2023 00:00:00 +0000 ROA not after: Fri 20 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 161.188.132.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/851cef17-132a-4337-b7d1-bf16a52ffd03.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 16 Sep 2023 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:aa:b3:50:8d:92:d7:4e:0d:e2:6d:3e:c8:ce:2c:3e:bf:13:b7:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476 Validity Not Before: Sep 15 00:00:00 2023 GMT Not After : Oct 20 23:59:59 2023 GMT Subject: serialNumber=c61c9b6249667e8bc6cad37bfcc9cad181fd72851dded2caac640754524928d1, CN=5f276045-5b9f-45ef-923d-f3fce24a6225 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4d:32:a8:ec:7e:99:f7:79:a6:0b:56:5e:f2: 15:95:bf:1c:f5:c8:ae:90:b5:e0:79:b4:9e:d1:a7: 80:1b:6f:74:cc:75:9c:d3:0a:3a:c3:03:22:eb:5a: c4:52:4a:04:44:e6:72:4e:a5:76:b0:e8:b9:72:e1: fd:d7:7f:21:dd:4c:c6:fb:e3:3b:61:46:07:40:d4: 9f:cf:8b:a1:55:30:b1:d8:22:5a:44:46:f9:d9:9b: 04:a8:c9:14:75:46:59:08:39:0b:36:83:79:74:51: 67:41:3a:9c:5c:e0:62:cc:cb:2a:bb:d9:cf:93:b9: c6:d4:67:b8:03:4a:c5:27:66:e1:27:91:3d:1d:89: 3a:6f:76:28:55:f4:16:9a:6c:a5:46:bb:fd:89:d2: f9:11:fb:58:3e:d3:10:e2:bc:cf:ee:3e:19:bb:1d: d8:67:f2:c6:b4:49:43:67:da:2d:1f:42:0a:ff:00: 31:a0:66:15:d6:2f:95:f4:42:2a:73:16:f7:f9:49: 84:8c:c5:70:7b:b5:ad:90:d8:e2:5c:cd:1f:e2:2b: fa:2a:56:a3:35:c2:07:93:4e:81:ee:d9:38:f6:cf: 00:ad:c6:5e:e1:10:6e:e1:89:ee:ee:cc:bb:18:91: 01:e5:17:df:ff:82:82:ac:93:41:06:14:58:f1:de: c4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E1:54:97:A8:3C:F1:56:5C:DC:6F:A2:6E:DD:33:C7:CE:EE:B3:4C X509v3 Authority Key Identifier: keyid:25:AD:D3:42:B0:1E:B7:A5:8E:AD:19:90:26:88:B5:4B:3F:81:F4:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/851cef17-132a-4337-b7d1-bf16a52ffd03/df6f3b3a34b6386d1a32d8f4fa3178ef31887d8b428dfaa476.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/04cfa462-48df-433d-86f1-73994c9b8fab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/f703696e-e47b-4c20-bd93-6f80904e42d2/tjhtGjLY9PoxeO8xiH2LQo36pHY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 161.188.132.0/23 Signature Algorithm: sha256WithRSAEncryption 79:82:21:64:e2:9d:d1:22:85:4f:b4:26:7b:07:ce:da:6d:86: 5b:fc:2c:47:3f:88:74:c4:d9:23:8b:6a:c8:98:db:48:89:61: 0d:ef:85:10:32:6c:ba:69:8a:93:ad:00:c7:95:3e:f7:2e:3b: 27:17:26:20:8d:e7:03:e3:b9:63:e5:5e:13:9e:8d:a7:b9:bf: 39:e8:41:7a:fb:9d:87:b6:01:a9:03:98:a6:77:58:cb:d6:f9: 72:e4:4a:d1:77:9e:ef:e5:f8:7a:00:2e:a5:61:89:c2:e9:19: 0e:f8:00:19:b7:0d:eb:f1:63:8f:05:31:6f:45:db:d8:99:88: 99:e9:4d:d7:ce:a8:75:6b:bb:73:c0:c4:c0:85:3b:11:03:e0: fd:47:26:f1:8b:bf:51:f5:98:1c:7f:16:eb:8e:b6:7e:a4:eb: c4:8e:e1:bc:d4:fd:7a:9a:da:59:2f:fb:d2:37:d7:15:12:ba: d4:b0:f2:8d:f9:c8:7c:c3:a7:63:d9:ef:75:2f:16:f0:d9:7e: c9:c4:8e:25:15:28:80:34:52:ad:f5:6c:28:6e:77:71:55:65: f2:e4:85:db:a8:1d:2b:84:1a:9c:3d:1f:aa:46:68:98:06:0c: 26:e7:b2:9f:52:b0:40:4b:78:eb:6a:10:a2:2d:39:c2:3f:25: 0b:ae:7f:a9 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUCKqzUI2S104N4m0+yM4sPr8Tt/QwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJkOGY0ZmEzMTc4ZWYz MTg4N2Q4YjQyOGRmYWE0NzYwHhcNMjMwOTE1MDAwMDAwWhcNMjMxMDIwMjM1OTU5 WjB6MUkwRwYDVQQFE0BjNjFjOWI2MjQ5NjY3ZThiYzZjYWQzN2JmY2M5Y2FkMTgx ZmQ3Mjg1MWRkZWQyY2FhYzY0MDc1NDUyNDkyOGQxMS0wKwYDVQQDEyQ1ZjI3NjA0 NS01YjlmLTQ1ZWYtOTIzZC1mM2ZjZTI0YTYyMjUwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDvTTKo7H6Z93mmC1Ze8hWVvxz1yK6QteB5tJ7Rp4Abb3TM dZzTCjrDAyLrWsRSSgRE5nJOpXaw6Lly4f3XfyHdTMb74zthRgdA1J/Pi6FVMLHY IlpERvnZmwSoyRR1RlkIOQs2g3l0UWdBOpxc4GLMyyq72c+TucbUZ7gDSsUnZuEn kT0diTpvdihV9BaabKVGu/2J0vkR+1g+0xDivM/uPhm7Hdhn8sa0SUNn2i0fQgr/ ADGgZhXWL5X0QipzFvf5SYSMxXB7ta2Q2OJczR/iK/oqVqM1wgeTToHu2Tj2zwCt xl7hEG7hie7uzLsYkQHlF9//goKsk0EGFFjx3sSfAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU3OFUl6g88VZc3G+ibt0zx87us0wwHwYDVR0jBBgwFoAUJa3TQrAet6WO rRmQJoi1Sz+B9LgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NTFjZWYxNy0x MzJhLTQzMzctYjdkMS1iZjE2YTUyZmZkMDMvZGY2ZjNiM2EzNGI2Mzg2ZDFhMzJk OGY0ZmEzMTc4ZWYzMTg4N2Q4YjQyOGRmYWE0NzYuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZjcwMzY5NmUtZTQ3Yi00YzIwLWJkOTMtNmY4 MDkwNGU0MmQyLzA0Y2ZhNDYyLTQ4ZGYtNDMzZC04NmYxLTczOTk0YzliOGZhYi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2Y3MDM2OTZlLWU0N2ItNGMyMC1iZDkz LTZmODA5MDRlNDJkMi90amh0R2pMWTlQb3hlTzh4aUgyTFFvMzZwSFkuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAGhvIQwDQYJKoZIhvcNAQELBQADggEBAHmCIWTindEihU+0JnsHztpthlv8 LEc/iHTE2SOLasiY20iJYQ3vhRAybLppipOtAMeVPvcuOycXJiCN5wPjuWPlXhOe jae5vznoQXr7nYe2AakDmKZ3WMvW+XLkStF3nu/l+HoALqVhicLpGQ74ABm3Devx Y48FMW9F29iZiJnpTdfOqHVru3PAxMCFOxED4P1HJvGLv1H1mBx/FuuOtn6k68SO 4bzU/Xqa2lkv+9I31xUSutSw8o35yHzDp2PZ73UvFvDZfsnEjiUVKIA0Uq31bChu d3FVZfLkhduoHSuEGpw9H6pGaJgGDCbnsp9SsEBLeOtqEKItOcI/JQuuf6k= -----END CERTIFICATE-----Generated at Fri Sep 15 17:17:23 2023 by rpki-client on console-ams.rpki-client.org